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- The MAILING DATE of this communication appears on the cov r sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication, 

• tf the period for reply specifred above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

• If NO period for reply is specified above, the maximum statutory period wilt apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Olftce later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)^ Responsive to communication(s) filed on 20 October 2000 . 
2a)n This action is FINAL. 2b)K This action is non-final. 

3) 0 Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under £x parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-32 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) 13 Claim(s) 7-32 is/are reiected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)n accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet{s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action or forni PTO-152. 
Priority under 35 U.S.C. §§119 and 120 

12) n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a)nAII b)n Some*c)n None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

13) S Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application) 

since a specific reference was included in the first sentence of the specification or in an Application Data Sheet. 
37 CFR 1.78. 

a) □ The translation of the foreign language provisional application has been received. 

14) n Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 since a specific 

reference was included in the first sentence of the specification or in an Application Data Sheet. 37 CFR 1 .78. 
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2) □ Notice of Drattsperson's Patent Drawing Review (PTO-948) 5) C] Notice of Informal Patent Application (PTO-152) 
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DETAILED ACTION 



1 . Claims 1-32 have been examined and are pending with this action. 



Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 



2. Claims 1-3, 6-11, 14-17, 20-27, and 30-32 are rejected under 35 U.S.C. 102(b) 

as being anticipated by Ankney et al. (US 51 13499 A). 

INDEPENDENT: 

As per claim 1 , Ankney teaches a method for selectably controlling and 
customizing source access to a network, wherein the source is associated with a source 
computer (see col.1, lines 12-18), and wherein the source computer has transparent 
access (see col. 6, lines 28-29) to the network (see Fig.3 and col.1, lines 7-11) via a 
gateway device (see coL5, lines 46-50) and no configuration software need be installed 
on the source computer to access the network (see col. 7, lines 3-19), comprising: 
receiving at the gateway device a request from the source computer for access to the 
network (see col .5, lines 46-50); identifying an attribute associated with the source 



states. 
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based upon a packet transnnitted fronn the source computer and received by the 
gateway device (see col.1, lines 24-27 and col. 5, lines 46-57); accessing a source 
profile corresponding to the source and stored in a source profile database, wherein the 
source profile is accessed based upon the attribute, and wherein the source profile 
database is located external to the gateway device and in communication with the 
gateway device (see Fig.3; col.5, lines 58-67; and col. 7, lines 40-44), and determining 
the access rights of the source based upon the source profile, wherein access rights 
define the rights of the source to access the network (see col. 6, lines 29-32). 

As per claim 10, Ankney teaches a system for selectably controlling and 
customizing access, to a network, by a source, where the source is associated with a 
source computer, and wherein the source computer has transparent access to the 
network via a gateway device and no configuration software need be installed on the 
source computer to access the network (see claim 1 rejection above), comprising: a 
gateway device (see col.5, lines 46-47: "packet switch"), wherein the gateway device 
receives a request from the source for access to the network (see col.5, lines 46-50); a 
source profile database in communication with the gateway device and located external 
to the gateway device (see Fig.3), wherein the source profile database stores access 
information identifiable by an attribute associated with the source, and wherein the 
attribute is identified based upon a data packet transmitted from the source computer 
and received by the gateway device (see col.5, lines 58-67 and col. 7, lines 40-44), and 
an Authentication, Authorization and Accounting (AAA) server in communication with 
the gateway device and source profile database, wherein the AAA server determines if 
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the source is entitled to access the network based upon the access information stored 
within the source profile database, and wherein the AAA server determines the access 
rights of the source, wherein access rights define the rights of the source to access 
destination sites via the network (see Fig.8-Fig.10; col.5, lines 7-16 & 58-67; and col.7, 
lines 20-27 & 40-44). 

As per claim 17, Ankney teaches a method for redirecting (see col. 15, lines 2-4) 
a source attempting to access a destination through a gateway device, wherein source 
is associated with a source computer, and wherein the gateway device enables the 
source to communicate with a network without requiring the source computer to include 
network software configured for the network (see claim 1 rejection above), comprising: 
receiving at the gateway device a request from the source to access the network (see 
col.5, lines 46-50); identifying the source based upon an attribute associated with the 
source (see col.l , lines 24-27 and col.5, lines 46-57); accessing a source profile 
database located external to the gateway device, the source profile database storing 
access rights of the source (see col.5, lines 53-67); determining the access rights of the 
source based upon the identification of the source, wherein the access rights define the 
rights of the source to access destination sites via the network (see col.7, lines 37-62). 

As per claim 26, Ankney teaches a system for enabling transparent 
communication between a computer and a service provider network (see claim 1 
rejection above), comprising: a computer (see col.5, line 36: "PC"); a network gateway 
device in communication with the computer for connecting the computer to a computer 
network (see Fig.3 and col. 5, lines 46-47: "packet switch"), wherein the network 
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gateway device receives source data that represents a user attempting to access the 
computer network (see col. 5, lines 46-50); and a service provider network in 
communication with the network gateway device, comprising an authentication server 
located external to the network gateway device and in communication with the network 
gateway device and having therein a source profile database comprising source profiles 
that represent users authorized to access the computer network (see col. 5, lines 58-67 
and col. 7, lines 40-44), wherein the authentication server compares the source data to 
the source profiles to determine if the user attempting to access the computer network 
can access the computer network (see col. 7, lines 37-62). 



DEPENDENT: 

As per claim 2, Ankney further teaches wherein determining the access rights of 
the source based upon the source profile comprises determining the access rights of 
the source based upon the source profile, wherein access hghts define the rights of the 
source to access a requested network destination (see col. 3, lines 51-60; col. 5, lines 7- 
16 & 58-67; and col.7, lines 40-44). 

As per claims 3 and 20, Ankney teaches of further comprising assigning a 
location identifier to the location from which requests for access to the network are 
transmitted, and wherein the location identifier is the attribute associated with the 
source (see col. 17, lines 9-12 and col. 19, lines 14-17). 
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As per claims 6 and 21, Ankney teaches of further comprising updating the 
source profile database when a new source accesses the network (see col. 16, lines 62- 
68; col. 18, lines 16-20; and col.20, lines 42-45). 

As per claim 7, Ankney teaches of further comprising maintaining in the source 
profile database a historical log of the source's access to the network (see col.20, lines 
46-50). 

As per claim 8, Ankney further teaches wherein the attribute associated with the 
source is based upon one of a MAC address. User ID or VLAN ID associated with the 
source computer from which the request for access to the network was transmitted (see 
col.1, lines 24-27 and col.7, lines 40-46). 

As per claims 9 and 23, Ankney further teaches wherein receiving at the gateway 
device a request from a source for access comprises the step of receiving a destination 
address from the source (see col.1 , lines 21-27 & 61-65 and col. 5, lines 39-45). 

As per claim 1 1 , Ankney further teaches wherein the packets received by the 
gateway device include at least one of VLAN ID, a circuit ID, and a MAC address (see 
col.1, lines 24-27 and col.7, lines 40-46). 

As per claims 14 and 30, Ankney further teaches wherein the source profile 
database includes a plurality of source profiles, wherein each respective source profile 
of the plurality of source profiles contains access information (see col. 5, lines 58-67; 
col.7, lines 40-44; and col.20, lines 42-45). 
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As per claim 15, Ankney further teaches wherein each respective source profile 
contains historical data relating to the duration of network access for use in determining 
the charges due for the network access (see col. 15, lines 2-9 and co.20, lines 2-5). 

As per claim 16, Ankney further teaches wherein the source profile database is 
located within the AAA server (see Fig.8-Fig.10 and col. 16, lines 59-63). 

As per claims 22 and 27, Ankney teaches of further comprising maintaining in an 
accounting database a historical log of the source's access to the network, wherein the 
accounting database is in communication with the source profile database (see col .20, 
lines 47-61). 

As per claim 24, Ankney further teaches wherein determining if the source 
computer is entitled to access the destination address further comprises denying the 
source computer access where the source profile indicates that the source computer is 
denied access (see col.6, lines 29-32 & 39-47). 

As per claim 25, Ankney further teaches wherein determining if the source is 
entitled to access the network further comprises directing the source to a login page 
when the source profile is not located within the source profile database (see col.6, lines 
14-25). 

As per claim 31 , Ankney further teaches wherein the source data comprises an 
attribute associated with the computer and transmitted from the computer to the 
gateway device (see col.1 , lines 20-27). 
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As per claim 32, Ankney further teaches wherein the source data comprises login 
information associated with a respective user (see col. 5, lines 39-45 and col.7, lines 37- 
44). 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 4, 5, 12, 13, 18, 19, 28, and 29 are rejected under 35 U.S.C. 103(a) as 

being unpatentable over Ankney et al. (US 51 1 3499 A) in view of Vaid et al. (US 

6502131 B1). 

As per claims 4, 12, 1 8, and 28, Ankney teaches all the limitations including 
wherein accessing a source profile corresponding to the source comprises accessing a 
source profile stored in a source profile database (see col. 5, line 59). However, Ankney 
does not explicitly teach wherein the source profile database comprises a remote 
authentication dial-in user service (RADIUS). Vaid teaches of a database compnsing a 
remote authentication dial-in user service (RADIUS) (see col.28, lines 16-25). It would 
have been obvious to a person of ordinary skill in the art at the time the invention was 
made to employ the teachings of Vaid within the system of Ankney by implementing 
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RADIUS within the source accessing system and method because Ankney teaches of a 
remote (see abstract, last sentence) and "dial up" (see coL6, lines 35-39) service. 
Therefore, since Vaid teaches that RADIUS could be considered to be policy servers 
and further teaches, "policies are rules that govern the behavior of the networking 
infrastructure in providing services such as QoS, security... " (see col. 25, lines 2-5), one 
of ordinary skill in the art would implement RADIUS to enforce the policies of the 
security system of Ankney. 

As per claims 5, 13, 19, and 29, Ankney teaches all the limitations including 
wherein accessing a source profile corresponding to the source comprises accessing a 
source profile stored in a source profile database (see col. 5, line 59). However, Ankney 
does not explicitly teach wherein the source profile database comprises a lightweight 
directory access protocol (LDAP) database. Vaid teaches of a database comprising a 
lightweight directory access protocol (LDAP) database (see coL27, lines 56-67). It 
would have been obvious to a person of ordinary skill in the art at the time the invention 
was made to employ the teachings of Vaid within the system of Ankney by 
implementing LDAP within the source accessing system and method because Vaid 
teaches that policies are usually stored in LDAP databases and "policies are rules that 
govern the behavior of the networking infrastructure in providing services such as QoS, 
security... " (see coL25, lines 2-6) like the security service system of Ankney. 
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4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Young N Won whose telephone number is 703-605- 
4241 . The examiner can normally be reached on M-Th: 8AM-6PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Hosain T Alam can be reached on 703-308-6662. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 

Young N Won 
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